[NDR-97] missing iam role for pre-sign

NogaNHS · NogaNHS · commit 753ec758d195 · 2025-06-20T11:31:11.000+01:00
diff --git a/infrastructure/iam.tf b/infrastructure/iam.tf
@@ -21,7 +21,7 @@ data "aws_iam_policy_document" "assume_role_policy_for_create_lambda" {
 
     principals {
       type        = "AWS"
-      identifiers = [module.create-doc-ref-lambda.lambda_execution_role_arn]
+      identifiers = [module.create-doc-ref-lambda.lambda_execution_role_arn, module.post-document-references-fhir-lambda.lambda_execution_role_arn]
     }
   }
 }
diff --git a/infrastructure/lambda-post-document-fhir.tf b/infrastructure/lambda-post-document-fhir.tf
@@ -36,6 +36,7 @@ module "post-document-references-fhir-lambda" {
     DOCUMENT_RETRIEVE_ENDPOINT_APIM = "${local.apim_api_url}/DocumentReference"
     PDS_FHIR_IS_STUBBED             = local.is_sandbox
     WORKSPACE                       = terraform.workspace
+    PRESIGNED_ASSUME_ROLE           = aws_iam_role.create_post_presign_url_role.arn
   }
   depends_on = [
     aws_api_gateway_rest_api.ndr_doc_store_api,

Original file line number	Diff line number	Diff line change
`@@ -21,7 +21,7 @@ data "aws_iam_policy_document" "assume_role_policy_for_create_lambda" {`
`21`	`21`
`22`	`22`	`principals {`
`23`	`23`	`type = "AWS"`
`24`		`- identifiers = [module.create-doc-ref-lambda.lambda_execution_role_arn]`
	`24`	`+ identifiers = [module.create-doc-ref-lambda.lambda_execution_role_arn, module.post-document-references-fhir-lambda.lambda_execution_role_arn]`
`25`	`25`	`}`
`26`	`26`	`}`
`27`	`27`	`}`
Original file line number	Diff line number	Diff line change
`@@ -36,6 +36,7 @@ module "post-document-references-fhir-lambda" {`
`36`	`36`	`DOCUMENT_RETRIEVE_ENDPOINT_APIM = "${local.apim_api_url}/DocumentReference"`
`37`	`37`	`PDS_FHIR_IS_STUBBED = local.is_sandbox`
`38`	`38`	`WORKSPACE = terraform.workspace`
	`39`	`+ PRESIGNED_ASSUME_ROLE = aws_iam_role.create_post_presign_url_role.arn`
`39`	`40`	`}`
`40`	`41`	`depends_on = [`
`41`	`42`	`aws_api_gateway_rest_api.ndr_doc_store_api,`